DEBIAN-CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

CVE-2009-3289 affects glib2.0: the g_file_copy function sets the target file permissions to 0777 when copying symbolic links, enabling user-assisted local modification of other users’ files. Affected software is glib2.0 (glib 2.0); several OS advisories reference fixes bundled with glib2 updates ...

PT-2009-5602 · Glib +1 · Glib +1

Name of the Vulnerable Software and Affected Versions: glib version 2.0 Description: The issue allows user-assisted local users to modify files of other users. This is demonstrated by using Nautilus to modify the permissions of the user home directory. The g file copy function sets the permission...

GNOME glib符号链接任意文件访问漏洞

Bugraq ID: 36313 GLib是一款GTK+和GNOME工程的基础底层核心程序库，是综合用途的轻量级的C程序库。 GNOME glib存在竞争条件问题，可导致任意文件访问或覆盖系统文件。 1，针对想要更改权限的文件或文件夹建立一个符号链接touch /testfile && ln -s /testfile /testlink。 2，使用Nautilus拷贝符号链接到任意地方ctrl+c && ctrl+v。 3，检查符号连接的文件或文件夹的权限。 结果可导致符号连接的文件或文件夹的权限已更改为777drwxrwxrwx user:user。 GNOME glib 2.16.4...

openSUSE Security Update : libpoppler-devel (libpoppler-devel-77)

This update fixes an code execution bug. CVE-2008-2950 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpoppler-devel-77. The text description of this plugin is C SUSE LLC...

[SECURITY] Fedora 10 Update: glib2-2.18.4-2.fc10

GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system. This package provides versi...

Fedora Core 9 FEDORA-2009-2688 (glib2)

The remote host is missing an update to glib2 announced via advisory FEDORA-2009-2688. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-2688 (glib2)

The remote host is missing an update to glib2 announced via advisory FEDORA-2009-2688. OpenVAS Vulnerability Test $Id: fcore20092688.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2688 glib2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Gentoo Security Advisory GLSA 200904-02 (glib)

The remote host is missing updates announced in advisory GLSA 200904-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200904-02 (glib)

The remote host is missing updates announced in advisory GLSA 200904-02. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

GLSA-200904-02 : GLib: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200904-02 GLib: Execution of arbitrary code Diego E. Petteno reported multiple integer overflows in glib/gbase64.c when converting a long string from or to a base64 representation. Impact : A remote attacker could entice a user or...

GLib: Execution of arbitrary code

Background The GLib is a library of C routines that is used by a multitude of programs. Description Diego E. Petteno reported multiple integer overflows in glib/gbase64.c when converting a long string from or to a base64 representation. Impact A remote attacker could entice a user or automated...

RedHat Security Advisory RHSA-2009:0336

The remote host is missing updates announced in advisory RHSA-2009:0336. GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop,...

RedHat Security Advisory RHSA-2009:0336

The remote host is missing updates announced in advisory RHSA-2009:0336. GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop,...

RHEL 5 : glib2 (RHSA-2009:0336)

Updated glib2 packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOM...

glib2: integer overflows in the base64 handling functions (oCERT-2008-015)

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either 1 from or 2 to a base64 representation...

Moderate: Red Hat Security Advisory: glib2 security update

Updated glib2 packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOM...